formbankserver vulnerabilities and fixes
Recent CVEs affecting formbankserver, with upgrade or downgrade steps. 3 tracked.
formbankserver has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2007-01-09. Highest priority: CVE-2006-6910 (score 54/100).
- CVE-2007-0138 MEDIUM 5.0 DOWNGRADE formbankcgi.exe in Fersch Formbankserver 1.9, when the PATH_INFO begins with (1) AbfrageForm or (2) EingabeFor
- CVE-2007-0055 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in formbankcgi.exe/AbfrageForm in Formbankserver 1.9 allows remote attackers
- CVE-2006-6910 HIGH 7.8 DOWNGRADE formbankcgi.exe in Fersch Formbankserver 1.9, when the PATH_INFO begins with Abfrage, allows remote attackers
FAQ
How do I fix formbankserver vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is formbankserver being exploited right now?
None of the tracked formbankserver CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which formbankserver CVE should I patch first?
CVE-2006-6910 currently ranks highest (54/100): formbankcgi.exe in Fersch Formbankserver 1.9, when the PATH_INFO begins with Abfrage, allows remote attackers .